CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Splunk®
  5. SPLK-2003

Free SPLK-2003 Exam Braindumps (page: 5)

Page 5 of 15
PDF with 96 Questions

An active playbook can be configured to operate on all containers that share which attribute?

  1. Artifact
  2. Label
  3. Tag
  4. Severity

Answer(s): B



After a playbook has run, where are the results stored?

  1. Splunk Index
  2. Case
  3. Container
  4. Log file

Answer(s): D



Which Phantom API command is used to create a custom list?

  1. phantom.add_list()
  2. phantom.create_list()
  3. phantom.include_list()
  4. phantom.new_list()

Answer(s): A



During a second test of a playbook, a user receives an error that states: 'an empty parameters list was passed to phantom.act()." What does this indicate?

  1. The container has artifacts not parameters.
  2. The playbook is using an incorrect container.
  3. The playbook debugger's scope is set to new.
  4. The playbook debugger's scope is set to all.

Answer(s): A



Page 5 of 15



Post your Comments and Discuss Splunk® SPLK-2003 exam with other Community members:

Frank commented on August 19, 2024
Nice for prepping but it is not complete. In order to get the complete version you need to purchase the full PDF version.
UNITED STATES
upvote

jh commented on August 14, 2023
Not bad, but still uses phantom as a description, its splunk soar now
AUSTRALIA
upvote